OKE Cluster Management Across Networks

Learn about OKE cluster management across networks on Compute Cloud@Customer.

Compute Cloud@Customer admin and data networks are configured for your environment by Oracle, when Oracle installs the Compute Cloud@Customer infrastructure in your data center.

The OKE service runs on the management nodes in the admin network, while the OKE clusters are deployed in the data network as shown in the following diagram.

A diagram showing the relationship between the admin and compute networks.

The management interface of an OKE cluster is port 6443 on its load balancer public IP address. This address is assigned from the data center IP range you reserved and configured as public IPs during the Compute Cloud@Customer infrastructure installation.

Because of the network segregation, traffic from the OKE service must exit the infrastructure through the admin network, and reenter through the data network to reach the OKE cluster.

Important

Your data center network infrastructure must allow traffic in both directions. Without the necessary firewall and routing rules, users can't deploy OKE clusters.

See Workload Cluster Network Ports (Flannel Overlay) for ports needed for OKE. For information about other network ports, see Network Port and Protocol Matrix.